Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
Static task
static1
Behavioral task
behavioral1
Sample
377db60e376ad1c6a1d7ae8de2c0d34a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
377db60e376ad1c6a1d7ae8de2c0d34a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
377db60e376ad1c6a1d7ae8de2c0d34a_JaffaCakes118
Size
25KB
MD5
377db60e376ad1c6a1d7ae8de2c0d34a
SHA1
5f1b6cbc2329166854285aa9cc6edadd5c77ee60
SHA256
41e6595df44445347382987d9df7a6d2e19e2e4aa90078947f7bc803f9de667e
SHA512
c8df5c9785f0d2537e76a031cd35b173771fcd761e77a0583a7a823f1a5af22bbd36895c30b577696e0cf8f51484923a6c1e8909feabcab0590234b8f6c48964
SSDEEP
384:niaak9ExQ8qHCYFYPMl8lKdhSzKHZ5Jg9Hfpkp7JT4K:baWExLPMSlarJi/pw
Checks for missing Authenticode signature.
resource |
---|
377db60e376ad1c6a1d7ae8de2c0d34a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ